Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341/f790e733-5968-35d0-8b67-400bde956cc8.roa
File:                     f790e733-5968-35d0-8b67-400bde956cc8.roa (raw, json)
Hash identifier:          ZmBFnc8YKCsTGp274EFApQAoUuz/jyN6a4P6Ze1J/H0=
Subject key identifier:   40:B9:70:D8:B5:40:90:19:09:4B:F6:A4:D5:FF:68:D4:52:63:B7:3D
Certificate issuer:       /CN=10e81901-486f-483f-806f-344bd4fe0341
Certificate serial:       010D0C9F4328584B25FC30D97ED15EF1436FFB00
Authority key identifier: 5F:95:1B:50:BE:51:5C:E6:54:C6:F3:D1:B8:87:A2:9D:73:41:8F:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341/f790e733-5968-35d0-8b67-400bde956cc8.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     33000
IP address blocks:        23.147.248.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341/10e81901-486f-483f-806f-344bd4fe0341.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341/10e81901-486f-483f-806f-344bd4fe0341.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:30:d9:7e:d1:5e:f1:43:6f:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10e81901-486f-483f-806f-344bd4fe0341
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=e02470c5-15d9-4f08-9b35-786398d3adf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f9:b5:33:aa:65:9e:58:07:71:7b:75:19:53:
                    ff:d2:78:4b:87:2c:e5:c7:65:01:8f:10:bb:e8:a0:
                    9f:60:c0:0d:20:cc:84:f7:fd:ec:15:14:60:6e:37:
                    a8:2c:85:6f:f2:69:22:19:f8:13:1e:34:1d:3a:e6:
                    a1:32:1f:b1:42:34:48:e8:83:c6:b0:f6:3e:bc:c2:
                    ed:9d:d9:30:0d:59:c2:2f:1d:bc:82:93:f3:35:4f:
                    99:f9:93:74:71:1e:23:24:70:30:7c:a1:49:5c:a9:
                    a4:b8:4b:6d:63:6e:06:c2:54:ef:5a:d8:c9:eb:9d:
                    d8:8a:56:70:47:5f:b7:5f:30:de:20:13:af:c6:91:
                    44:49:13:af:9e:d0:67:c7:57:af:ea:b8:a1:bd:c6:
                    b7:76:04:95:44:de:bf:ff:da:62:88:36:3a:0d:f5:
                    87:f0:73:e4:79:de:09:1d:c3:c1:f0:bd:2b:bf:46:
                    7f:89:d1:c8:aa:1b:de:1b:8f:dd:0a:8e:49:0e:07:
                    c1:4f:1b:bb:a0:ac:81:83:f3:4e:6c:ee:1b:44:19:
                    f2:b8:76:8c:16:48:ee:4c:ca:91:c6:71:26:8d:ab:
                    c6:21:b1:6a:cf:18:da:cb:d4:92:24:29:d7:d5:c9:
                    49:6d:85:58:18:3a:84:27:f9:34:06:ca:5c:d9:bf:
                    29:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B9:70:D8:B5:40:90:19:09:4B:F6:A4:D5:FF:68:D4:52:63:B7:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341/f790e733-5968-35d0-8b67-400bde956cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341/10e81901-486f-483f-806f-344bd4fe0341.crl

            X509v3 Authority Key Identifier:
                keyid:5F:95:1B:50:BE:51:5C:E6:54:C6:F3:D1:B8:87:A2:9D:73:41:8F:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:64:c9:79:9d:dc:2c:b3:e7:99:ff:dc:c7:4a:de:8e:11:8e:
         48:6a:84:83:a8:b6:fe:de:b9:c5:24:04:3f:14:f2:08:0a:5e:
         22:e4:64:4c:24:3c:0e:b2:e3:d1:20:2c:6a:fc:7f:ae:83:da:
         f2:24:23:31:e1:6f:bb:63:52:87:07:9f:37:ef:14:23:38:b6:
         6a:1e:c9:65:36:0c:e4:f7:53:9e:c2:3f:03:9c:9e:40:6d:20:
         a1:22:ab:09:23:2b:50:1a:96:35:55:09:9b:c6:ec:06:0c:66:
         60:53:ee:58:de:6d:98:f9:f9:ec:2c:3a:8c:25:5c:87:c9:c6:
         5e:08:6b:44:0b:6f:c1:cb:c3:27:05:92:b1:6f:35:31:ae:f1:
         0f:c6:79:fa:7a:3e:0d:37:c1:43:18:b5:82:9c:f8:4b:94:90:
         a4:de:c3:70:4b:b5:22:fb:56:f8:99:d3:c7:4b:5c:9f:f7:c9:
         7c:5b:3f:23:80:18:7a:72:18:2d:8f:15:a3:6b:47:15:3e:08:
         f4:f9:e6:91:f4:3d:5e:96:dc:65:a9:76:dd:ae:61:0c:0c:fe:
         7d:d9:4b:bd:3f:6a:d4:e3:18:d1:5c:59:08:06:aa:44:b1:f6:
         b1:39:5c:f8:eb:45:54:5f:8f:6d:f3:b2:c5:77:a7:65:52:36:
         73:6e:38:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:33:16 2025 by rpki-client